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Abstract 

This paper describes a theory of inheritance theories. We present 
an original theory of inheritance in nonmonotonic hierarchies. The 
structures on which this theory is based delineate a framework that 
subsumes most inheritance theories in the literature, providing a new 
foundation for inheritance. 

• Our path-based theory is sound and complete w.r.t. a direct 
model-theoretic semantics. 

• Both the credulous and the skeptical conclusions of this theory 
are polynomial-time computable. 

• We prove that true skeptical inheritance is not contained in the 
language of path-based inheritance. 

Because our techniques are modular w.r.t. the definition of specificity, 
they generalize to provide a unified framework for a broad class of in- 
heritance theories. By describing multiple inheritance theories in the 
same "language" of credulous extensions, we make principled compar- 
isons rather than the ad-hoc examination of specific examples makes 
up most of the comparative inheritance work. 
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Figure 1: A simple inheritance hierarchy. 

1 Introduction 

Inheritance reasoning is ubiquitous. Hierarchies provide a concise encoding of much of our com- 
monsense knowledge. They appear in various guises in the literature of artificial intelligence, but 
also throughout the various arts and sciences. Open nearly any textbook, and some hierarchy is 
likely to appear. 

Reasoning with inheritance hierarchies is of particular interest to the artificial intelligence com- 
munity because hierarchies are not only useful and native to human reasoning, but also simple and 
often tractable. The simplicity of the "inheritance problem" makes it attractive as a topic that can 
be considered in its entirety; its tractability makes it practical for the implementation of knowledge 
representation systems. 

In this paper, we present several equivalent formulations of inheritance reasoning. Each ap- 
proach may be useful in a particular context; by demonstrating their equivalence, we show that 
the most appropriate definition may be chosen. The techniques that we develop here generalize to 
a broad class of existing systems, providing a unified foundation for inheritance theory and a basis 
for comparative analysis, as well as extending previous results. 

We begin, in section 2, by providing an intuitive description of what we intend by inheritance 
reasoning. We view inheritance hierarchies as representing primitive assertions in the knowledge 
base of some reasoning agent, and the inheritance problem as that of determining the agent's 
derived beliefs. The work in the remainder of this paper builds on this foundation. 

In section 3, we give a formal path-based definition of inheritance. A path-based inheritance 
theory gives rules describing the admissible conclusions of a hierarchy. The theory presented here 
combines rules concerning the transitivity of primitive assertions with an ambiguity-resolution 
criterion to be invoked when two paths conflict. We describe the transitivity component by the 
notion of reachability; the resolution criterion is captured by specificity. 

In section 4, we describe a model-theoretic semantics for inheritance hierarchies. A hierarchy 
defines a space of possible world-states — credulous extensions — or unambiguous interpretations. 
Specificity induces a preference relation over these world-states. In the resulting preferential se- 
mantics, each world-state has a classical model-theoretic interpretation, and the interpretation of 
an inheritance hierarchy is the set of models of preferred world-states. We demonstrate that the 
path-based theory of section 3 is sound and complete with respect to this model theory. 

The model-theoretic semantics that we describe in section 4 differs from previous semantics for 
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inheritance hierarchies by separating the model preference criterion — specificity — from the semantic 
space. The language of credulous extensions is a common basis for the semantics of inheritance 
systems. By varying the definition of specificity — selecting different sets of preferred extensions — 
we obtain model-theoretic semantics for diverse inheritance theories. We present an alternate 
specificity criterion in section 8. ' 

Section 5 describes a tractable algorithm for computing the inferences supported by an in- 
heritance hierarchy. This is the first tractable theory for credulous inheritance — reasoning about 
what might be. Previous tractable inheritance theories have been limited to skeptical reasoning — 
computing what must be — or to an otherwise limited subset of the credulous conclusions. 

In section 6, we present a reason maintenance labeling scheme for inheritance reasoners. We 
label each node of the hierarchy with a propositional formula corresponding to the conditions 
under which the associated inference — a is- or is-not-a x — holds. These labels keep track of all of 
the possible (or preferred) interpretations of an inheritance hierarchy simultaneously, allowing us 
to draw contingent conclusions and reason about the interrelatedness of inferences. 

In section 7, we use the reason maintenance labeling to define and investigate the problem of 
ideally skeptical inheritance — computing the intersection of credulous extensions. Where credulous 
inheritance is analogous to propositional satisfiability, the ideally skeptical conclusions of a hierarchy 
are its theorems, or valid conclusions. We demonstrate that previous "skeptical" theories are not 
ideally skeptical, and prove that no purely path-based inheritance definition can compute the ideally 
skeptical conclusion? of an inheritance hierarchy. 

Section 8 and 9 examine several previous theories of inheritance. Section 8 replicates the work 
in the body of this paper for off-path inheritance. In section 9, we make more general comparisons 
with existing inheritance research and position our work in that larger context. 

2 Hierarchies as Belief Spaces 

In this section, we present an intuitive interpretation of inheritance hierarchies. In later sections, 
we give formal definitions of these ideas; here, we hope to motivate that more formal work by 
answering the question of "what we mean" when we draw an inheritance hierarchy. Regrettably, 
most previous theories of inheritance omit such a statement of intent, and the lack of such an 
intuitive semantics has been one of the criticisms levelled against the entire inheritance endeavor 
(c.f. Woods [42], Brachman [7], Bacchus [4], etc.). 

Our interpretation of inheritance hierarchies is relatively simple. Each arc in an inheritance 
hierarchy — such as figure 1 — represents an atomic assertion in the knowledge base of some rea- 
soning agent — what this agent "believes," if you will. 1 Since this paper deals exclusively with 
defeasible inheritance, it is possible that an arc in the hierarchy — an atomic belief — is mistaken 
(e.g., lumberjacks might not, in fact, be Real™ men); however, in this agent's world-model, each 
of these atomic assertions holds. 2 

Reachability, or transitivity-by- default, poses a second constraint on world-models. This con- 
straint arises when we try to apply an atomic assertion — Reai men are hearty eaters — to some 
other class or individual — lumberjacks, or Joe the Reai man. The fact that Joe may be a picky 



1 We put the word "believes" in quotation marks to emphasize that we are not proposing that edges of an inheritance 
hierarchy follow any realistic epistemic ontology; rather, we find the term belief, when removed from that formal 
context, to be suggestive of the kind of tentative assertion about the world that we wish to describe. 

2 The exception to this is the case in which the knowledge base contains both the atomic assertion that a (defeasibly) 
is an x, and the atomic assertion that a (defeasibly) is not an x. Here, there are (at least) two possibilities: the 
reasoner's beliefs may be ambiguous; or they may be (locally) inconsistent. We opt for the ambiguity interpretation 
(see below). 
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Figure 2: Is a platypus a mammal? 
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Figure 3: A b/ue whale w an aquatic creature. 

eater does not defeat either the assertion that Joe is a Real™ man, or the assertion that Real™ 
men are generally heart/ eaters; it merely makes Joe an atypical Real™ man. In the absence 
of conflicting information, the world-model of our reasoner is constrained so that subclasses and 
individuals are typical of their superclasses. 

Finally, we have the third kind of defeasibility in inheritance hierarchies: the defeasibility 
of ambiguous conclusions. Unlike the defeasibility of atomic assertions or that of derived (but 
uncontested) conclusions, ambiguity's defeasibility arises when there are two explicit and conflicting 
arguments. In figure 2, the derived conclusion that platypuses are mammals is directly opposed 
by the (equally legitimate) conclusion that platypuses are not mammals. In this case, even the 
reasoning agent is assumed to be aware of the defeasibility. Indeed, we interpret such a hierarchy 
as asserting that the world must be in such a state that either platypuses are mammals, or they are 
not; but this reasoner does not know which. That is, the atomic assertions hold; and the assertions 
in some maximal consistent subset of their transitive closures hold; but there may be several such 
subsets, corresponding to several possible states of the world. 

The situation here is not as hopeless as it may sound. First, the reasoner may prefer one of these 
possible world-states. For example, in figure 3, there are derived paths asserting that blue whales 



L. A. Stein Resolving Ambiguity in Nonmonotonic Inheritance 4 

are aquatic creatures (by virtue of their being whales, which are explicitly aquatic) and that blue 
whales are not aquatic (by virtue of their being mammals). If we were reasoning about whales, this 
conflict would be easily resolved: the assertion that whales are aquatic is explicit, and therefore 
blocks the derived assertion (through mammals) that whales are not aquatic. In the case of blue 
whales, we can resolve this ambiguity by resorting to arguments about specificity. Because blue 
whales are mammals only by virtue of being whales, information about whales is more specific to 
blue whales than information about mammals, and the reasoner prefers to believe that the actual 
world-state is one in which biue whales are aquatic. We discuss the notion of specificity, and the 
selection of preferred world-states, in greater detail below. 

Second, even in truly ambiguous cases — such as I^ — the inheritance hierarchy may contain 
contingent information. In this case, the reasoner cannot determine whether the actual world 
corresponds to the possible world-state in which platypuses are mammals, or that in which they 
are not. However, the reasoner can assert that if the actual world-state is such that platypuses 
are mammals, then it follows that platypuses produce milk. In this fashion, the hierarchy supports 
conclusions relative to a particular possible world-state. 

3 A Path-Based Definition 

A path-based theory of inheritance is one which defines the admissible conclusions of an inheritance 
hierarchy to be precisely the set of conclusions supported by admissible paths in the hierarchy. For 
example, the reason that lumberjacks are believed to be hearty eaters (according to figure 1) is 
that there is a path from lumberjack through Heal man to hearty eater in T\. Like proof 
theories, path-based inheritance theories give almost algorithmic characterizations of the process 
by which conclusions are derived. In some cases, they lead to tractable inference procedures. In 
general, however, path-based inheritance theories lack model-theoretic semantics. Previous path- 
based theories of inheritance include the work of Touretzky, Horty, and Thomason [18, 17, 19, 38, 
39, 40, 41], Sandewall [32], and Geflher and Verma [14]. 

In this section, we present a path-based theory of inheritance. In section 4 we describe a model- 
theoretic semantics for which this path-based theory is sound and complete. In section 5, we present 
an 0(n 4 ) algorithm for computing the conclusions of an inheritance hierarchy supported by this 
path-based definition. 

Our path-based inheritance theory is similar to that of Touretzky [39, 40], save that it is upwards 
reasoning. Upwards inheritance reasons about the properties of some particular object, rather than 
about the set of objects possessing some particular property. Some ramifications of upwards vs. 
downwards inheritance are discussed by Touretzky et al. [41]; the computational advantages of 
upwards inheritance are described by Levesque and Selman [33] (see also section 5, below). 

The approach that we describe in this section is also credulous: it allows a conclusion whenever 
that conclusion is consistent with some (preferred) interpretation of the hierarchy; or, whenever it 
is a plausible conclusion of the reasoner's explicit beliefs. Thus, in a hierarchy like T2, we expect 
to draw both the conclusion that a platypus is-a mammal, and that a platypus is-not-a mammal. 
In section 6, we discuss the problem of contingent reasoning — deterrnining the assumptions that 
underlie credulous conclusions. For example, we conclude that a platypus is-a milk-producer when- 
ever we assume that it is-a mammal. In section 7, we discuss skeptical reasoning, in which only 
the certain — uncontested — conclusions of the hierarchy are considered. 
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Figure 4: A hierarchy is ambiguous w.r.t. a focus node. 

3.1 The Framework 

An inheritance hierarchy T = (Vr,^) is a directed acyclic graph with positive and negative 
edges, intended to denote "is-a" and "is-not-a" respectively. We write a positive edge from a to x 
as a • x, and a negative edge a ■ ->x. We call a sequence of positive edges a • sj • • • s n • x (n > 0), 3 a 
positive path, and a sequence of positive edges followed by a single negative edge a • si • • • s n • ->x 
(n > 0) a negative path. 

A path, or argument, a • s^ • • • s n ■ (-i)a: supports the inference "a is (not) an x." We use 
the notation a-*x (resp., ay+a:) to stand for this inference, or conclusion, independently of the path 
through which it is derived. One inference — e.g., a—>x — may have many supporting arguments — 
a • 5j • • • s n • x, a • t\ • • • t m • x, etc. 

Given an inheritance hierarchy T = {Vr,Er) with nodes a, x G Vr, we say that a; is reachable 
from a (alternately, a-reachable) if there is some path a • s t • • • s n • (-i)x in Ep. If the final edge is 
positive — s^ ■ x — we say that x is positively reachable from a; similarly, s n • ->x and negatively 
a-reachable. By extension, we say that an edge s • (->)x is reachable from a if 5 is positively 
a-reachable, and a path $i • • • s n • (-i)x is reachable from a if every edge on that path is a-reachable. 
We say that a hierarchy T is a-connected if every node in Vr and every edge in Ep is reachable 
from a. When reasoning about an inheritance hierarchy w.r.t. a particular node, we call that node 
the focus node. 

Ambiguity arises when two paths conflict. Formally, an inheritance hierarchy T is ambiguous 
w.r.t. a node a if there is some node a; € Vr such that both a • «i ■ • • s n • a; and a • t% • • • t m • ->x are in 
Ep. In this case, we say that the ambiguity is at x. Ambiguity is always relative to a focus node: 
for example, T 4 is unambiguous w.r.t. a, but ambiguous w.r.t. 6 (at e). 

Our definition of ambiguity differs from the conventional one. First, we introduce the notion of 
ambiguity w.r.t. a focus node. To previous theories, the hierarchy in figure 4 is simply ambiguous: 
w.r.t. a or b or c or d or e. Second, our definition of ambiguity is stronger than that in the literature. 
For example, by our definition, T3 is ambiguous w.r.t. whale. This reflects the fact that there are 
paths whale • aquatic creature and whale • mammal • -1 aquatic creature in Er 3 . We shall see in 
the next section that specificity resolves this ambiguity and the conclusions derivable from T3 are 
unambiguous. Previous inheritance theories do not distinguish between resolvable ambiguities — 

3 The notation a-si ■ s 2 abbreviates the set of edges {a-$i,si -32}; Si •••s„ abbreviates {si -S2)»2 •«», ••••«n-i -s n }. 
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such as that in figure 3 — and unambiguous hierarchies such as figure 1. Hierarchies with ambiguous 
conclusion sets — like figure 2 — we term truly ambiguous w.r.t. focus nodes. 

An inheritance hierarchy T supports a path a ■ Si • • ■ s n • (~<)x, written T |> a • si ■ ■ • s n • (->)«, 
if the corresponding sequence of edges a • Si • • • s n • (-i)a: is in Ep and it is admissible according to 
specificity. We discuss admissibility in the next section. T supports an inference a— >x (resp., 
a-/>x) if it supports some corresponding path. For simplicity, we also allow the degenerate path a, 
with the corresponding inference a—>a. 

3.2 Specificity 

A specificity criterion, or preemption strategy, makes admissibility choices among certain com- 
peting paths. The idea of specificity dates from Touretzky's inferential distance [39, 40]. Since 
then, many definitions of specificity have appeared in the literature, but all operate on the same 
underlying principle: more specific information is more directly relevant. For example, in figure 3, 
information about whales is more specific to blue whales than information about mammals, so we 
can infer that blue whales are aquatic. 

The framework that we have presented so far is compatible with many of the existing definitions 
of specificity. In this section, we present an original definition. Our specificity criterion closely 
resembles Touretzky's original notion of specificity [39, 40], but which is computable in polynomial 
time (see section 5). In section 8, we describe an alternate definition of specificity — one resembling 
that of Sandewall [32] and Horty et al. [18, 19] — and show how to integrate that definition into this 
framework. 

An edge v • (-i)x is admissible in T w.r.t. a if there is some path a ■ si • • • s n • v, (n > 0), in 
Ep, and 

1. None of the edges of a • Si • • • s n • v is redundant in T w.r.t. a, 

2. Each of the edges of a • $i • • • s n • v is admissible in T w.r.t. a, and 

3. No intermediate node a,si, ...s n is a preemptor of v • (~>)x w.r.t. a. 

Intuitively, an edge is admissible if there is a non-redundant admissible path leading to it that 
contains no preempting intermediaries. 

A path is admissible in T w.r.t. a if every edge in that path is admissible. 

A node s is a preemptor 4 of v • x (resp., v • ->x) w.r.t. a if s • ->£ £ Er (resp., s • x G Ep). 
For example, the positive edge from whale to aquatic preempts the negative edge from mammal to 
aquatic, w.r.t. both whaie and blue whale. 

The difficulties caused by redundant links were noted by Touretzky [39, 40]: Consider 1^ aug- 
mented by an additional edge from biue whale to mammal. This edge would be redundant: blue 
whales are typically mammals even without the explicit assertion. However, if the edge from biue 
whaie to mammal were not excluded, there would be an admissible path biue whaie • mammai • 
-taquatic creature — no intermediate node is a preemptor of mammai • -naquatic creature. Clearly, 
this is not the intended meaning here (or, indeed, in any network of this form, since the "whaie" 
node is always more specific than the "mammai" node (w.r.t. "biue whaies")). 

An edge b-w is redundant in T w.r.t. focus node a if there is some positive path b-t\ •••t m -w G 
Er, m > 1, for which 



4 Perhaps "potential preemptor" would be a better term: if s is not on any (admissible, non-redundant, positive) 
path from a to v, then s effectively has no bearing on the admissibility of v ■ (~<)x. This is because preemptors are 
checked only in condition 3 of the definition of admissibility. In [35, 37, 36], we gave a stronger — ^and incorrect — 
condition here. 
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1. Each of the edges of b • 1 1 • • • t m is admissible in T w.r.t. a, 

2. There are no c and z such that c • -itj is admissible in T w.r.t. a; there is no c such that c • -ito 
is admissible in V w.r.t. a. 5 

Redundant edges may themselves be admissible. For example, an edge from blue whale to mammal 
in figure 3 would be admissible w.r.t. blue whale. However, redundant edges may not contribute to 
the admissibility of other edges: mammal • ->aquatic creature is not admissible w.r.t. blue whale, 
in spite of the admissible path blue whale • mammal. Conditions 2 and 3 in the definition of 
admissibility hold for the path blue whale • mammal • aquatic creature, but condition 1 is violated. 
The path-based definition of supports yields the following conclusions on the hierarchy I^ in 
figure 2: 



T 2 |> platypus— ►platypus 

r 2 |> platypus— >furry animal 

T 2 |> platypus— ►egg-layer 

T 2 |> platypus— +mammal(* * *) 

T 2 |> platypus-/*mammal(* * *) 

T 2 |> platypus— >milk-producer 

?2 l> egg-layer— *egg-layer 

T 2 |> egg-layer-f*mammal 



T 2 |> furry animal— >funy animal 

T 2 j> funy animal— ►mammal 

T 2 |> furry animal-* milk-producer 

T 2 |> mammal— >mammal 

T 2 |> mammal— ► milk-producer 

F 2 |> milk-producer -^milk-producer 



In this case, specificity cannot resolve the ambiguity w.r.t. platypus at mammal, and T2 supports 
both of the assertions marked (***): that platypuses are mammals, and that they are not mammals. 
In such a case — when a hierarchy supports conflicting paths — we say that the hierarchy is truly 
ambiguous w.r.t. platypuses. 
The conclusion-set of T3 is 

T$ \> whale— * whale 

T3 \> whale— ^mammal 

Tz |> wAale— >aquatic creature 



r 3 


|> 


blue whale— *blue whale 


r 3 


i> 


blue whale— *whale 


r 3 


|> 


blue whale— ^mammal 


r 3 


l> 


blue whale— * aquatic creature 



T 3 |> aquatic creature— ► aquatic creature 



r 3 |> mammal— ^mammal 

r 3 |> mammal/*aquatic creature 



In this case, specificity resolves the ambiguities w.r.t. blue whale and whale at aquatic creature. 
As a result, 

T 3 |£ blue whale^aquatic creature and T 3 ft whale-/* aquatic creature 

The same set of conclusions would result if we added a redundant edge from blue whale to mammal. 

4 Mo del- theoretic Semantics 



The path-based inheritance theory of the previous section is a sort of "proof theory" for inheritance: 
given a hierarchy, it describes the rules by which conclusions may be drawn. In this section, we 
present a model-theoretic approach to understanding the meaning of an inheritance hierarchy. 
Rather than the admissible conclusions, this section speaks of the possible world-states — credulous 
extensions — that are "models" satisfying the constraints imposed by the hierarchy. In essence, 



B Although the definitions of admissibility and redundancy are mutually dependent, they are not circular. Because 
the hierarchy is acyclic, it can be ordered topologically, and the definition of an admissible edge v ■ (->)a; depends only 
on the redundancy of edges with endpoints strictly topologically earlier than 1. 
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this section makes rigorous the informal characterization of the meaning of inheritance hierarchies 
described in section 2. 

Previous theories of inheritance semantics have been translational: a hierarchy is expressed as 
a set of statements in some particular (nonmonotonic) logic, and the semantics of the logic provide 
semantics for the hierarchy. For example, McCarthy [27], Haugh [16], and Krishnaprasad, Kifer, 
and Warren [22, 23] translate inheritance hierarchies into particular circumscriptive theories [26]; 
Etherington and Reiter [11, 12, 13] treat hierarchies as theories of Reiter's default logic [31]; Przy- 
musinska and Gelfond [15, 30] use Moore's autoepistemic logic [29] as a target language; Bacchus [4] 
bases his translation on a probabilistic logic; and Boutilier [6] uses a conditional logic. 

While the semantics provided by most of these theories are as satisfying as the semantics 
of the underlying logics, they are less semantics of inheritance than theories of how inheritance 
relates to (or can be expressed in) those logics. In contrast, the theory that we present here is 
a theory of direct semantics for inheritance hierarchies. Hierarchies define a space of possible 
interpretations, or models. Specificity — drawn from the topological properties of the hierarchy — is 
used as a preference criterion over these models. The meaning of the hierarchy is the set of its 
maximally preferred models. The result is a preferential semantics like those of Bossu and Siegel [5], 
Etherington [10, 12], and Shoham [34] for more general nonmonotonic logics. 

Further, virtually every previous — translational or path-based — approach to inheritance se- 
mantics contains a fixed ambiguity-resolving preemption strategy. 6 Although the selection of an 
appropriate preemption strategy is still a subject for debate in the inheritance literature (see, e.g., 
Touretzky et aUs discussion of the "Clash of Intuitions" [41]), existing systems of inheritance as- 
sume some single, fixed strategy. Preemption strategies are variously embedded in the mechanics 
of path construction, the translation procedure, or the underlying nonmonotonic logic. This makes 
it extraordinarily difficult to compare underlying preemption strategies. As a result, most so-called 
"comparisons of inheritance theories" are in reality ad hoc comparisons of system performances on 
selected examples. 

In contrast, our semantics is modular. We reduce a hierarchy to its possible interpretations, 
or credulous extensions. Our semantics for individual extensions is independent of the specificity 
criterion used to select among extensions. The credulous extension semantics generalize to arbitrary 
upwards inheritance theories, providing a common base for their semantics. By combining with 
different selection strategies, these extensions — possible world-states — give sound and complete 
model-theoretic semantics for alternate inheritance theories. This means we can compare the 
ambiguity-resolving heuristics of various inheritance theories directly and theoretically, rather than 
by resorting to ad hoc analysis of specific examples. We make use of this generality to explore 
off-path inheritance in section 8, below. 

4.1 Semantics for Credulous Extensions 

We focus first on the problem of providing a model-theoretic semantics for a single, unambiguous 
"credulous extension." In general, we believe that a translational approach to inheritance semantics 
is undesirable. Such an approach trades the topological information inherent in a hierarchy for the 
semantics for an existing logic. In particular, translational approaches provide less- than- satisfactory 
means for dealing with ambiguities. Often, they merely adopt the ambiguity-resolving strategy of 
the target logic, which may not be appropriate for inheritance hierarchies. Where they do provide 
additional, explicit ambiguity resolution, it is fixed as a part of the translation procedure. 

The approach to semantics for credulous extensions that we present here is translational. How- 
ever, it is not subject to these criticisms of translational approaches precisely because it provides 

6 The exception to this is Haugh [16]; see the discussion of his work in section 9, below. 
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translations only for credulous extensions — unambiguous subhierarchies — and not for a hierarchy as 
a whole. Thus, it does not rely on the translation procedure or the underlying logic for ambiguity- 
resolution strategies. All ambiguity-resolution is done in the (non-translational) process of selecting 
some preferred subset of the credulous extensions; once the set of credulous extensions — or possible 
interpretations — for a hierarchy has been established, the semantics for any single extension are 
straightforward. In the next section, we discuss the problem of deriving the appropriate preferences 
over credulous extensions. 

A credulous extension corresponds to a possible world-state — one in the space of world-states 
defined by inheritance ambiguity. Formally, a credulous extension of an inheritance hierarchy 
T with respect to a node a is a maximal unambiguous a-connected subhierarchy of T with respect 
to a: if X£ is a credulous extension of T w.r.t. a, then for every edge v • (^)x £ E? — E%r, adding 
v • (->)x to X„ would make X£ ambiguous or not a-connected. An example of several credulous 
extensions — and some non-extensions — for the hierarchy of figure 2 is given in figure 5. 

Several previous inheritance theories include a related but distinct concept. Touretzky [40] 
based his inheritance theory on a construct that he called a grounded expansion. Sandewall [32] 
used the term extension to refer to structures much like Touretzky's grounded expansions. However, 
our credulous extensions differ from Touretzky's grounded expansions and Sandewall's extensions — 
we will call them both expansions — in two significant ways. First, their expansions are supersets 
of the hierarchy — the original hierarchy plus some additional, "disambiguating" information. For 
example, in I?2, one expansion adds the additional edge platypus ■ mammal, while another adds 
platypus • -tmammal. In our terms, their expansions are themselves ambiguous hierarchies. Second, 
their expansions are of the hierarchy as a whole, while ours are w.r.t. a particular focus node. 
To Touretzky and Sandewall, 1^ simply has two expansions, period. In our theory, T% has two 
credulous extensions w.r.t. platypus, but only one w.r.t. egg-layer or mammal. In both of these 
ways, our credulous extensions correspond more closely to the extension of a predicate or of a 
default logic theory than to past definitions of the expansion of an inheritance hierarchy. 

Because a credulous extension is unambiguous, every edge is admissible. Thus, instead of 
X„ |> a— >a: — there is an admissible positive path from a to x — we need merely check that there is 
some positive path from a to a; (resp., a-/>x and negative path). We make use of this to provide a 
straightforward model-theoretic semantics for a single extension: 

For every vertex x G V x r, we create a unique propositional variable x. X£ is the theory (in 
the propositional calculus) given by 

2 A( £:) 3/) A( 2D ~£) 7 

x-y€£/x r x—<y£E-xT 

Since X„ is unambiguous, X„ is consistent and has a model. 

In other words, we translate the edges of X„ into material implications, allowing inference chains 
exactly when there are paths in the credulous extension. It would be nice if all of inheritance seman- 
tics were this easy. However, Thomason et al. demonstrate that the translation into propositional 
logic does not work even in the simpler case of strict (non- defeasible) inheritance [38], where local 
inconsistency in a hierarchy would lead to a globally inconsistent theory. In the general defeasible 
case, the propositional theory corresponding to an ambiguous inheritance hierarchy would be in- 
consistent. The only reason that the translation into a propositional theory works here is that it is 
the translation of a credulous extension: an unambiguous subhierarchy. Ambiguity resolution must 
therefore be applied in selecting the credulous extensions that are the preferred interpretations of 
the original hierarchy. 

A, D , and ~ should be read as propositional conjunction, material implication, and negation, respectively). 
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Figure 5: Some extensions and non-extensions of T^. 
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Once we have chosen the preferred extensions — as we discuss in the next section — this trans- 
lational semantics provides the desired result. The following theorem states that support — the 
existence of an admissible path — is equivalent to entailment in the propositional theory. Thus the 
path-based definition of support for credulous extensions is sound and complete w.r.t. the model- 
theoretic semantics defined here. 

Theorem 1 (Soundness and Completeness for Credulous Extensions) 

Let r be an inheritance hierarchy, with a,x G Vr . Let X£ be a credulous extension of 
T w.r.t. a, and let X£ be the propositional theory corresponding to X^. The following 
are equivalent: 

1. X^\>a—>x (resp., a-/>x). 

2. x is positively a-reachable in X\ (resp., negatively a-reachable) . 

3. X„ \- x (resp., ~x). 
4- X£ |= * (resp., ~x). 

This follows directly from the fact that every path in a credulous extension is admissible. Full 
proofs of all theorems may be found in appendix A. 

4.2 Selecting Preferred Extensions 

Given a single credulous extension, we have seen how to derive a model-theoretic interpretation of 
that extension. In fact, the semantics of the previous section would work any time we began with an 
unambiguous inheritance hierarchy (which would have only a single credulous extension w.r.t. any 
focus node). But inheritance hierarchies are generally ambiguous. As a result, T may have several 
extensions w.r.t. a given focus node, a. Some of these extensions may be more intuitive than others. 
In this section, we describe a means of selecting the preferred (more intuitive) extensions of T w.r.t. 
a. The semantics of T are then simply the sets of interpretations for the preferred extensions of T 
w.r.t. the nodes of Vr- 

In inheritance hierarchies, specificity gives us a means of ruling out unintuitive interpretations. 
Thus, we use the definition of admissibility according to specificity, from section 3.2, above, to 
define the preference relation over credulous extensions. We say that one extension is preferred to 
another if it is "more consistent" with the constraints of specificity: 

Let X„ and Y„ be two credulous extensions of an inheritance hierarchy T w.r.t. focus node a. 
Then specificity prefers X£ to Y£ (X£ ■< Y£ ) if there are some nodes v and x such that 

1. X£ and Y„ agree on all edges whose endpoints topologically precede x, s 

2. The edge v ■ (-i)x is inadmissible in T w.r.t. a, and 

3. Y£ contains that inadmissible edge: 3si, ...s n , Y„ [> a ■ Si • • • s n • v • (->)a:, and 

4. X£ does not include it: X£ |£ a • s x • • ■ s n ■ v • (-^)x. (Note that X£ |> a • «i • ■ • s n , by 1.) 

If a credulous extension is minimal under this preorder — i.e. no other extension is preferred to 
it — we call it a preferred extension of the hierarchy: 

Vref(T,a) = {X r a \VYlY r a ^X r a } 



L. A. Stein Resolving Ambiguity in Nonmonotonic Inheritance 12 



XI 



A^wt 




blu€.u**xlc blue,uj^olt 

Figure 6: Specificity prefers x£f ue whaJe to Y£/ ue ^j^. 

where X£ and Y£ axe credulous extensions of T w.r.t. a. 

Figure 6 shows the two credulous extensions of the hierarchy in figure 3. Specificity prefers 

X hlue whale to Y blue whale : 

!• X Wue whale and Y bJue whale a & ee U P to aquatic creature 
2. mammal • -iaquatic creature is inadmissible in I^ w.r.t. blue whale 
3- Y blue ^^ |> blue whale • whale • mamma] • -iaquatic creature, and 
4. Xjj ue yfaje \f> blue whale • whale • mammal • -iaquatic creature. 

Theorem 2 is a soundness and completeness theorem for the path-based definition of section 3 
w.r.t. the complete model-theoretic semantics defined here: selecting preferred extensions and pro- 
viding translational semantics for those preferred extensions. In section 8, we demonstrate that 
other inheritance theories, with other definitions of specificity, can be described in these terms. 
This enables us to use the definitions of this section and section 3 to give similar soundness and 
completeness results for several existing inheritance theories. 

Theorem 2 (Soundness and Completeness) 

Let r be an inheritance hierarchy, with a,x G Vr> and let Vref(T,a)be the set of 
preferred extensions of V w.r.t. a. Then T |> a— >x iff there is some preferred extension 
X„ € Vref(T, a) such that X£ |= £ (resp., a-/*x and ~x). 9 

The complete model-theoretic interpretation of I^ in figure 2, is therefore the set of mod- 
els of preferred extensions. In this case, specificity cannot disambiguate the hierarchy, and both 
extensions are preferred. The propositional theories w.r.t. platypus are 

platypus A (platypus D furry animal) A (furry animal D mammal) 
A (mammal D milk-producer) A (platypus D egg-layer) 



8 That is, if every topological sort places s and t before x, then X„ and Y„ agree on edges s ■ (->)<• 
9 Since r|>a— >a: whenever some preferred extension (of T w.r.t. a) entails x, |>is analogous to propositional 
satisfiability. This is the essence of credulous inheritance: a conclusion is admissible if there is some (preferred) 
possible world-state supporting it. In section 7, we discuss the problem of skeptical inheritance — "valid" conclusions — 
entailed by all preferred possible world-states. In terms of the framework of this section, these are the conclusions 
supported by all preferred credulous extensions. 
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entailing the conclusions 

platypus furry animal mammal mUk-producei egg-layer 

and ____ ___ ___ __ 

platypus A (platypus D furry animal) A (platypus D egg-layer) 

A (egg-layer D ~mammal) 

which entails 

platypus furry animal ~ mammal egg-layer 

The preferential semantics allows the conclusion that platypus is-a a; if a; is entailed by the models 
of either of these theories, so playtpus is-a 

platypus furry animal mammal milk-producer egg-layer 

and platypus is-not-a mammai. The hierarchy is unambiguous w.r.t. its other nodes. The conclu- 
sions w.r.t. furry animal are furry animal, mammal, and milk-producer, since X^ animal * s 

furry animal A (furry animal D mammal) A (mammai D milk-producer) 

^mammal ls ______ ^_^ 

mammal A (mammai D milir-producer) 

which entails mammal and milk-producer, and Xj^j t . producer is milk-producer. X^L.^ is 

egg-layer A (egg-layer D ~mammal) 

entailing furry animal and ~mammal. 

In contrast, specificity does provide a preference over the credulous extensions of the hierarchy 
in figure 3 w.r.t. blue whale and whale. The interpretation of T3 w.r.t. blue whale is therefore the 

interpretation of the single preferred extension, Xy ue ^afe, from figure 6: 

blue whale A (blue whale D whale) A (whale D mammal) 

A (whale D aquatic creature) 

This entails the conclusions (w.r.t. blue whale) 

blue whale whale mammai aquatic creature 

Similarly, specificity prefers the extension w.r.t. whale in which whales are aquatic, with the cor- 
responding propositional theory 

whale A (whale D mammal) A (whale D aquatic creature) 

and the hierarchy entails the inferences that a whale is-a whale, mammal, and aquatic creature. 
The hierarchy is unambiguous w.r.t. mammals and aquatic creatures, so there is only one credulous 
extension w.r.t. each of these: 

mammal A (mammal D ~aquatic creature) 

and a mammal is-a mammal, but is-not-a aquatic creature; and 

aquatic creature 

so an aquatic creature is-a aquatic creature. 
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Figure 7: SlJ l i computes specificity on T^ w.r.t. b/ue whale. 

5 Computing Specificity 

The preference criterion approach to ambiguity resolution is satisfying from a semantic perspective, 
but it does not tell us much about how to derive the preferred extensions of a hierarchy. In this 
section, we give a polynomial- time — 0(n 5 ) — algorithm for computing E£, the specificity extension 
of T w.r.t. a. This algorithm demonstrates that upwards inheritance is tractable for credulous 
(goal-directed) on-path reasoning. In section 7, we extend this result to include ideally skeptical 
reasoning; in section 8, we give a similar algorithm for off-path inheritance. 

There are several other computational theories of inheritance in the literature. Those of Horty 
et al. [18, 19] and Haugh [16] as well as the ambiguity-propagating algorithm of our [36, section 4] 
are "skeptical" — they attempt to compute only those conclusions that are unopposed. We discuss 
skeptical theories in section 7, below, where we show that none of these previous theories are 
ideally skeptical. Geffner and Verma [14] 'also offer an algorithm that is sound but incomplete for 
their inheritance theory. No previous path-based theory has been shown tractable for credulous 
inheritance. 

Etherington [12, p. 89] gives an algorithm for finding extensions of general default theories. 
Kautz and Selman [21, theorem 1] have adapted this algorithm to find a single (arbitrary) ex- 
tension of a disjunction-free ordered default theory. This class includes the inheritance theory 
of Etherington and Reiter [12, 13]. However, Kautz and Selman's 0(n 2 ) algorithm finds only a 
single arbitrary extension of the hierarchy, and cannot be used to determine whether a particular 
conclusion is supported. Indeed, Kautz and Selman demonstrate that goal-directed reasoning — 
determining whether there is an extension supporting some particular conclusion — is, for ordered 
default theories, Af V-h&id [21, theorem 3]. Similarly, they show that skeptical reasoning for the 
same class of theories is A/"'P-hard [21, theorem 7], In [33, theorem 2], Levesque and Selman demon- 
strate that downward inheritance reasoning (as espoused, e.g., by Touretzky [39, 40]) is ./VP-hard, 
whether skeptical or credulous, on- or off- path. 

Our algorithm is therefore the first sound and complete algorithm for credulous inheritance 
reasoning. It generates E£ the specificity extension of T w.r.t. a. E£ is a subhierarchy of T 
containing only and exactly the admissible edges of T w.r.t. a. For example, the specificity extension 
of the hierarchy in figure 3 w.r.t. blue whale is shown in figure 7. 

The following algorithm always yields a unique specificity extension ££ for a hierarchy V w.r.t. 
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focus node a. 
COMPUTE-SPECIFICITY-EXTENSION (I\ a) 

Let E^ contain the a-reachable nodes of T, and no edges. 

R := 

For each node x in S„, in topological order 

Add edges v ■ (->) a; from T to £„ 

For each edge v ■ (->) a; in E^, in reverse topological order 
Let E* be £„ minus any nodes that are preemptors 
of v • (-1) aj (i.e. remove any edges into and out of 
preempting nodes) 
If E* no longer contains a positive path from a to v 
then remove the edge v • (-1) x from E„ 

For each remaining positive edge p ■ x 

If there is a positive path from p to x in S„ 
that goes through no negatively o-reachable nodes 
then move p ■ x from Ejjr to R 

Restore the redundant edges in R to E^r 

Return S£ 



Ej, ttiilZ 6e the specificity extension 

ofT w.r.t. a. 
R will hold the redundant edges of T 

w.r.t. a. 
From a to ...: 

Restore x-edges 

Now weed out preempted x-edges: 
Remove potential preemptors 

Is v still positively a-reachable ? 

If not, it's preempted 

Check if it 's redundant 

If so, 

Remove the edge — temporarily 

Redundant edges are still admissible 



Theorem 3 (Complexity of compute-specificity-extension) 
Constructing E„ is 0(n 5 ) 

The following theorem is essentially a proof of correctness for COMPUTE-SPECIFICITY- 
EXTENSION. It says that E£ contains all and only those edges of T that are admissible w.r.t. 



Theorem 4 (Correctness of COMPUTE-SPECIPICITY-EXTENSION) 

Let r be an inheritance hierarchy, with a G Vr, and let E£ be the specificity extension 

of T w.r.t. a. Then E s r = {v ■ (->)x\v ■ (-i)a; admissible in Tw.r.t. a} 

The subhierarchy of admissible (w.r.t. a) edges in T may still be ambiguous. For example, 
all of the edges in a diamond ambiguity such as the platypus diamond of figure 2 are admissible; 
E J . , the specificity extension of T 2 w.r.t. platypus, is simply T 2 and, like T 2 , has two credulous 
extensions w.r.t. platypus. However, the ambiguities that can be resolved by specificity have been: 
the credulous extensions of S£ are precisely the preferred credulous extensions of T w.r.t. a. 

Corollary 4.1 Let T be an inheritance hierarchy, with a € Vr- Let Vref(T,a) 
be the set of preferred credulous extensions ofT w.r.t. a and let E^ be the specificity 
extension of T w.r.t. a. Then X^ G Vref(T,a) iff X^ is a credulous extension of S„ 
w.r.t. a. 
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Corollary 4.2 Let V be an inheritance hierarchy, with a 6 Fp. Let ££ be the 
specificity extension of T w.r.t. a. Then T\>a— >x iff x is positively a-reachable in 
YF a (resp., a-f*x and negatively a-reachable) . 

This means that an inference a-^x is supported by Y — alternately, a preferred credulous ex- 
tension of T w.r.t. a entails x- — iff x is positively a-reachable in £„. Since verifying reachability 
is linear in the number of edges, it follows that computing the credulous conclusions of T is also 
tractable. 

Corollary 4.3 (Complexity of Credulous Inheritance) 

Deciding whether V \> a— >x is 0(n 5 ) (resp., a-/*x). 

6 Reason Maintenance and Inheritance 

In this section, we define a reason maintenance system for inheritance hierarchies. A reason main- 
tenance system is a construction that keeps track of the assumptions or justifications supporting a 
particular conclusion; several systems of this type appear in the literature [8, 9, 24, 25, 28]. 

In the case of inheritance hierarchies, the reason maintenance system keeps track of the multiple 
credulous extensions of a hierarchy (w.r.t. each node), using a set of propositional labels for the 
nodes of that hierarchy. This function mimics the behavior of de Kleer's assumption-based truth 
maintenance system (ATMS) [8]; when we introduced the labeling scheme in [35], we called it the 
A TMS-labeling of the hierarchy. 

The reason maintenance labeling keeps track of all of the possible interpretations — the credulous 
extensions — at once. We exploit this feature to draw contingent conclusions: that is, to determine 
what follows if we make a certain assumption. For example, in figure 2, we can conclude that 
if platypuses are mammals, then they produce milk. In section 7, below, we use the labeling to 
examine the problem of skeptical inheritance — computing what conclusions hold in every credulous 
extension. 

For each pair of nodes, a and x, in Vr we define two labels: [«]£, the conditions under 
which a is an a;, and [aTj£, the conditions under which a is not an x. |f J„ and |[ - ]]£ may be 
thought of as operators on nodes returning boolean formulae. For example, we would expect that 
[hearty eater l]umber;acJc wou ^^ ^ e [T] — lumberjacks are expected to be hearty eaters — while the 
negative label ll u i c h e - eater }iu m i, ei j ac k would be [T] — lumberjacks normally don't eat quiche. How- 
ever, [«]£ isn't always ~ [«]]„: both the positive label ftquiche-eaterji 1 , . and the negative 

label [quicheeaterlj^., eatei are [±], since Ti gives us no information about whether hearty eaters 
tend to eat quiche. 

In general, we might reason about whether a is an x in some particular T as follows: 

Let Q>os r (x) be the "positive children" of a; in T — the nodes p; € Vr with positive 
edges p • x G Er — and let Oieg T (x) be the "negative children" of a: in T — n 6 Vr | 
n ■ -ix G Er. Suppose that, for all p 6 Q>os r (x), a is not a p; i.e., T ft a^>p. Then 
T |£a— >ai, because there is no support for x. So 

~lQ>os T (x)} r a D -[zK 

Here, we have introduced a notational shorthand: I^os r (a;)]„ really means 
(VpeCpos r (x) Mo)' wnere an empty disjunction is to be read as _L. 
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Figure 8: The labeling of I^ w.r.t. platypus. 

On the other hand, if a is a p, for some p £ Q>os r (x), but a is definitely not an n for 
any of ai's negative children n, then a is also an x: a:'s positive children provide it with 
a supporting argument, and there are no explicit counterarguments. That yields 

lQ>os r (x)f a A(~l(heg r (x)f a ) D [xf. 

Finally, it could be that at least one of Q>os r (x) is true, but at least one of Cneg T {x) 
is also true. In this case, x is ambiguous: it has some support, but there is also a 
counterargument. If x is ambiguous, its value is unconstrained. In some credulous 
extensions, we would expect {x]^ to be true, and in others it should be false. When 
this situation arises, x becomes a choice-point and we introduce x — the free variable 
corresponding to the node x — into the labeling scheme. The truth value assigned to x 
shouldn't matter most of the time, but in this special circumstance — when [G>os r (#)]]£ 
and [6»effr(*)lo 5 so x is ambiguous — we want [a:]£ to vary freely with x. 

([0»«r(*)E A i<he 9r (x)f a ) D ([*£ = *) 

Conjoining these three constraints gives us the conditions under which a is an a;. The positive 
label for x w.r.t. a is given by: 

lx] r a = [mos r (x)f a A(^lG l eg r (x)fj)v(lQ>os r (x)f a Al(heg r (x)f a Ax)] 

whenever x is not a leaf. 

In addition, we have [a]£ = [T] — a is always an a — and Vz, if x ^ a is a leaf of the hierarchy, 
[a:]|£ = [J_] — trivially, T [£ a— >x. These rules for generating labels mimic the construction of paths — 
reachability — by concatenating the edges of the hierarchy. 

There is a similar labeling scheme for [*]]„, the conditions under which T |> a-/*x: 

1. [a]£ = [±]: a is never a non-a. 

2. If x ^ a is a leaf of T, [aF]£ = [±]: since a; cannot be a-reachable, T \fc> a-fcx. 

3. For a generic node, x, 

m r a = ((^lQ>os r (x)f a )Al(heg r (x)f a )w(l(i>os r (x)f a AlGteg r (x)f a A^x) 
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For example, the labeling of the platypus diamond of figure 2 w.r.t. platypus is shown in 
figure 8. In this hierarchy, l mammai Jn} a ty DUS — [mammal]. Although this label says very little — 
platypuses are mammals in those extensions in which they are mammals — the propagation of labels 
yields [miit-producer] ] a< = [mammal] — platypuses are also milk-producers in precisely those 

extensions in which they are mammals. This is exactly the sort of contingent reasoning that we 
would expect our interpretation of inheritance hierarchies to capture. 

Theorem 5 demonstrates that these labels keep track of all of the credulous extensions of a 
hierarchy at once. In the following sections, we present several useful corollaries of this theorem. 

Theorem 5 (Correspondence Theorem) 

Let T be an inheritance hierarchy, with a,x G Vr-. Then there is a correspondence 
between the set of credulous extensions of T w.r.t. a, and the truth-assignments to 
the free variables in the labels of T w.r.t. a, such that the truth-assignment assigns 
I^la = [T] iff the corresponding extension supports a—>x (resp., pc|£ and a-/*x). 

The mapping from extensions of T w.r.t. a to truth-assignments assigns a variable x [T] iff" a is-a 
x in the extension; the inverse mapping creates an extension containing those edges q ■ s G Ep for 
which lqf a = lsf a - [T], and q ■ -is G E r whenever |g]J = [T] and pf a = [±]. A proof of the 
Correspondence Theorem may be found in appendix A. 

It follows immediately that the labels of an inheritance hierarchy are computing reachability: 

Corollary 5.1 Let T be an inheritance hierarchy, with a, x G Vr> Then |a;]£ is 
satisfiable iff x is positively a-reachable in T. (resp., |aFj£ and negatively a-reachable) . 

Of course, reachability is not really what we are interested in. T supports an inference if its 
conclusion is reachable by an admissible path, not just any path. That is, the labels are not taking 
into account specificity — the preemption of an argument by a more specific counterargument. 

Happily, we have a way of constructing the subhierarchy of admissible edges in T w.r.t. a — this 
is £„. It follows immediately from theorem ?? and corollary 5.1 that satisfiability of the labels of 
E£ w.r.t. a corresponds to admissibility in T w.r.t. a, i.e. |> . 

Corollary 5.2 Let T be an inheritance hierarchy, with a, x G Vf, and let E£ be the 

s r " _ s r 

specificity extension of T w.r.t. a. Then §x} a a is satisfiable iffT\>a^>x (resp., \x\ a a 

and a-/*x). 

This means that to take specificity into account — to reason only about T's preferred extensions w.r.t. 
a— we can simply apply COMPUTE-SPECIFICITY-EXTENSION to T, a and label the resulting 
E|j. Any contingent conclusions — or, as we shall see in the next section, skeptical conclusions — that 
we draw using the labels of ££ w.r.t. a apply to T taking specificity into account. 

An alternative but more complex approach to labeling with specificity might be to integrate 
the specificity criterion directly into the labeling scheme. In this case, we would condition the 
acceptance of a node on its non-preempted children. Unfortunately, even for a relatively simple 
preemption scheme such as the one described in section 3.2, these labels are quite complicated. For 
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example, the "specificity label" for a-^-x is 
/ / / 
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On each line, the left-hand portion — [pj£ or Jn]£ — is simply the old term Q>ost<(x) or Gieg T (x) — 
a;'s children — and the right-hand portion formalizes "and that child is not preempted." For more 
complex preemption schemes, such as that described in section 8, the labels become still more 
complicated. 

Fortunately, we do not have to resort to embedding specificity in the labeling scheme. The speci- 
ficity extension of a hierarchy provides us with precisely the information we need — a subbierarchy 
containing only admissible edges — and simple reachability in the specificity extension is equivalent 
to reachability by an admissible path in the complete hierarchy. Thus, instead of using the more 
complex "specificity labels" on the full hierarchy, we can compute the specificity extension of the 
hierarchy and use the simpler labels defined in section 6, above. 

We can use this labeling in updating the hierarchy. Consider, for example, the hierarchy of 
figure 2. If we later discover that platypuses are mammals, the labeling automatically tells us that 
they are milk-producers as well (since lmilk-producer]^ ) j atypus = [mammai], and now \mammalY a — 
[mammal] = [T]. In fact, we can incorporate various types of ambiguity resolving information — 
from domain-specific knowledge to updated beliefs — into this labeling simply by adding further 
constraints. 

The complexity of this extended labeling algorithm, including further constraints, is unknown. 
Since it is a special case of boolean satisfiability, the problem may be A/'P-hard. However, for the 
limited case of determining that a label is falsifiable — i.e., that there is some credulous extension 
in which the corresponding inference does not hold — there is a polynomial algorithm due to Kautz 
and Selman [21]. In the next section, we explore the problem of skeptical inheritance: computing 
the intersection of credulous extensions. 



7 Skeptical Inheritance 

Up to this point, we have been discussing credulous inheritance — reasoning in which a conclusion 
that holds in some plausible (preferred) extension is acceptable. This type of reasoning is analogous 
to finding satisfiable sentences. In this section, we discuss skeptical inheritance: computing those 
inferences that hold in all plausible interpretations. These conclusions are the valid consequences 
of the hierarchy-what must follow from the reasoners beliefs, no matter which possible world-state 
actually exists. 

The labeling scheme of section 6 provides a language for expressing these two types of inher- 
itance. We have seen that credulous inheritance permits a conclusion a-*x iff \xf- a is satisfiable. 
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Figure 9: Applying ambiguity blocking inheritance to r$ w.r.t. o yields B£ 6 . 

Formally, ideally skeptical inheritance supports exactly those conclusions true in every (pre- 
ferred) credulous extension. It follows from theorem 5 that a isa x in every credulous extension 
of F w.r.t. a iff \xY a is valid. Similarly, intersecting preferred credulous extensions corresponds to 
taking the valid labels of E£. 

Corollary 5.3 Let T be an inheritance hierarchy, with a, x G Vr, and let ££ be 
the specificity extension of T w.r.t. a. Then [[«]£ is valid (tautological) iff a^>x holds 

in every credulous extension of T w.r.t. a, and lx] a a is valid iff a-*x holds in every 
preferred credulous extension of T w.r.t. a (resp., [*]£ and negatively a-reachable) . 

Corollary 5.3 tells us that \x\a a is valid iff a— >x holds in the intersection of T's preferred 
credulous extensions (w.r.t. a). Determining this set of conclusions is exactly the problem of 
ideally skeptical inheritance. 

In the next sections, we present two path- based approaches to skeptical inheritance that have 
received some attention in the literature. We demonstrate that these approaches are not ideally 
skeptical: they do not compute exactly the always-true conclusions of a hierarchy. We show fur- 
ther that no path-based approach can be both sound and complete for ideally skeptical inheritance. 
The problem of ideally skeptical inheritance — intersecting credulous extensions — lies outside the 
language of path-based inheritance theories. The difficulty lies in the fact that some conclusions 
may be true in every credulous extension, but supported by different paths in each. Any path- 
based theory must either accept one of these paths — and be unsound, since such a path is not in 
every extension — or reject all such paths — and with them the ideally skeptical conclusion — and be 
incomplete. 

7.1 Ambiguity Blocking Inheritance 

The first attempt at skeptical inheritance is due to Horty et al. [18, 19]; 10 Haugh [16] gives an 
equivalent circumscriptive definition. They argue that an ambiguous fine of reasoning should not 

10 According to Horty (personal communication), a "skeptical" approach to inheritance is one which offers a unique, 
unambiguous set of conclusions for any inheritance hierarchy. This differs with our intuition that "skeptical" means 
"unwilling to believe uncertain conclusions." In Horty's view, computing the intersection of the credulous extensions 
is only one way to reason "skeptically." 
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Figure 10: B£ 6 computes "parity." 



be allowed to interfere with other potential conclusions. Because this approach discontinues a line of 
reasoning as soon as an ambiguity has been reached, Haugh calls it ambiguity blocking inheritance. 
Although Horty et al., and Haugh describe a specific theory — including, e.g., a particular specificity 
criterion — ambiguity blocking inheritance potentially defines a general approach. We paraphrase 
ambiguity blocking inheritance here: 

Let B„ initially be T. Starting from the focus node a, consider each node x in topological order. 
If T is truly ambiguous w.r.t. a at a:, 11 remove all edges into and out of x from B£. When 
the entire hierarchy has been scanned, B£ is truly unambiguous w.r.t. a. This is the ambiguity 
blocking skeptical extension of T; ambiguity blocking inheritance concludes that a network T 
admits a-+* exactly when B^ |> a ■ s t ■ ■ ■ s n ■ x (resp., a-/+x and a ■ s-i • • • s n • -<x). 

While ambiguity blocking inheritance seems reasonable, it results in some anomalous conclu- 
sions. Consider, for example, figure 9. Ambiguity blocking inheritance on T with focus node a 
determines that e is ambiguous w.r.t. a, so it eliminates all edges to and from e. In particular, 
it eliminates the edge e • -if, making / unambiguous w.r.t. a: B^ B |>a-»/. This is certainly one 
possibility. But it is also possible that a— ye; and if a— >e, it is unclear whether a—>f — that is, a 
might not be an /. It is certainly not safe to assume from the ambiguity at e that the path a-b-d- f 
is always true. But this is precisely what ambiguity blocking inheritance does. This anomaly was 
first noted by Horty et al. [18, 41], 

A more severe anomaly follows from this first. Ambiguity blocking inheritance computes a kind 
of "parity" on the number of ambiguities in a path. According to ambiguity blocking inheritance, 
the network in figure 10 is skeptical as to whether a is-a e or an t, but allows the conclusions that 
a is-a g and a j. Similarly, this net is skeptical about whether 6 or / is-a j, but allows the paths 
from a and d to j. More than the first anomaly, this result calls into question the intuitiveness 
of ambiguity blocking inheritance. In any case, ambiguity blocking inheritance is unsound w.r.t. 
ideally skeptical inheritance: there are inferences a-+x such that B^ \>a— >x, but [a;]^ is falsifiable. 
Figures 9 and 10 both illustrate this unsoundness of ambiguity blocking inheritance. 



'T is truly ambiguous w.r.t. o at x if T |> a— *x and T \> a-/*x. 



L. A. Stein Resolving Ambiguity in Nonmonotonic Inheritance 22 




ex. 

Figure 11: Il£ 6 results from ambiguity propagating inheritance. 

7.2 Ambiguity Propagating Inheritance 

Ambiguity propagating inheritance allows ambiguous lines of reasoning to proceed. An argu- 
ment thus cannot be certain unless there are no counterarguments; in contrast, ambiguity blocking 
inheritance considers only unambiguous counterarguments. Like ambiguity blocking inheritance, 
ambiguity propagation defines a family of algorithms. Haugh [16] gives a circumscriptive definition; 
in [36], we describe an 0(|Er|) algorithm. Again, we paraphrase: 

Starting from the focus node a, consider each node x of T in topological order. If T is truly 
ambiguous w.r.t. a at x, rather than eliminating all edges to and from a;, retain x but mark it as 
ambiguous w.r.t. a. Although paths to and from x will not be included in the final result, they 
can still act as counterarguments during this processing and prevent other nodes from being 
unambiguous. 11^ is the a-connected subgraph of T with those edges x ■ (->)y G JBp such that 
neither x nor y is marked ambiguous w.r.t. a. 

For example, the cascading ambiguities of figures 9 and 10, which gave ambiguity blocking 
inheritance difficulty, present no problem for ambiguity propagating inheritance. Figure 11 shows 

Il£ is sound w.r.t. ideally skeptical inheritance: if Il£ |> a-*x, then [a]£ is satisfiable. In fact, 
II;, computes the subhierarchy of V containing exactly those edges of T that are in every (preferred) 
credulous extension of T w.r.t. a. However, Il£ is incomplete: there are some inferences a—>x that 
are supported by every credulous extension of T w.r.t. a but have different supporting arguments in 
different extensions. These conclusions are not supported by Il£. We demonstrate such a hierarchy 
in the next section. In these circumstances, we need to reason about inferences rather than paths. 

7.3 Ideally Skeptical Inheritance 

Consider the hierarchy in figure 12. 12 Every credulous extension w.r.t. seedless grape. vine supports 
the inference seedless grape vine—>plant, so ideally skeptical inheritance concludes that seedless 
grape vines are plants. Suppose, for example, that a seedless grape vine is a fruit plant; then it is a 
plant. Suppose that it is not a fruit plant; then it is unambiguously an arbor plant, and therefore 



12 Matt Ginsberg has independently proposed a hierarchy with similar properties, in which Nixon is always politically 
motivated. 
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a plant. In any state of the world, no matter how we resolve the ambiguities of the taxonomy, a 
seedless grape vine is a plant. This is reflected in the fact that [p^fcdfcjjnaperiie ~ ["*"]• 

If we wish to determine what is true in all possible worlds, we cannot avoid this kind of reasoning. 
There are facts which are true in all credulous extensions, but which have no justification in the 
intersection of those extensions. This is why we cannot generate an "ideally skeptical extension" — 
no particular set of edges of V from seedless grape vine to plant is in every credulous extension, 
so no such path can be in the "ideally skeptical extension." Thus every path-based approach to 
skeptical inheritance will always be either unsound or incomplete with respect to ideally skeptical 
inheritance. 

Theorem 6 Any path-based inheritance theory will be either unsound or incomplete 
for ideally skeptical inheritance; the intersection of credulous extensions is not a path- 
based notion. 

Proof: A path-based theory insists that admissible conclusions are only those 
supported by admissible paths. If a path-based theory supports the conclu- 
sion seedless grape vine—*plant, it must admit at least one path that supports 
seedless grape vine— >piant. But the only paths that support seedless grape vine— >plant 
are 

seedless grape vine • grape vine • fruit plant • tree • plant 



and 



seedless grape vine • grape vine • vine • arbor plant • plant 



Neither of these conclusions is in every credulous extension. A theory accepting either 
of these conclusions is therefore unsound for ideally skeptical inheritance. Alternately, 
a path-based theory can reject both of these (unsound) paths. However, the theory 
then accepts no path supporting the conclusion seedless grape vine— >plant, so it cannot 
accept that conclusion. Since that conclusion holds in every credulous extension, such 
a path-based theory is incomplete for ideally skeptical inheritance. 

This theorem deserves a few remarks. The first is that its proof depends only on the definition 
of a path-based theory and not on any particular properties of any individual path-based theory. 
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Therefore, it applies to the class of path-based theories as a whole. The second is that the hierarchy 

Tr does not involve specificity. It is therefore independent of any choice of specificity criterion, and 

holds for all such criteria (assuming that no specificity criterion would resolve diamond ambiguities). 

This result demonstrates that we can only compute the always-true inferences by, in effect, 

reasoning about all of the credulous extensions. Fortunately, in acyclic hierarchies, such reasoning is 

tractable. Corollary 5.3 establishes that a conclusion holds in the intersection of preferred credulous 

s r _ s r 

extensions (of T w.r.t. a) whenever [a] a a (resp. [a] a a ) is valid. In section 5, we demomnstrated 

that constructing E£ — eh'minating specificity — requires polynomial time. Kautz and Selman [21] 

describe a polymonial time procedure for computing the validity of a label (without specificity). 

By applying Kautz and Selman's algorithm to S^, we can compute the intersection of preferred 

credulous extensions — ideally skeptical inheritance — in polynomial time. 

Corollary 6.1 (Complexity of Skeptical Inheritance) 

Ideally skeptical inheritance — computing the intersection of preferred credulous 
extensions — is 0(n 5 ) 

Proof: By application of Kautz and Selman's NORMAL-UNARY- SKEPTICAL [21, 
p. 196] to the result of our COMPUTE-SPECIFICITY- EXTENSION (section 5). The 
complexity of the algorithm follows directly from theorem 3 and Kautz and Selman's [21, 
theorem 9]. Its correctness follows follows from that theorem and our corollary 5.3. 

8 Off-Path Inheritance 

The inheritance theory presented above uses a specificity criterion called on-path preemption. In 
this type of ambiguity-resolution, an edge is inadmissible if every non-redundant admissible prefix 
contains a preemptor. In this section, we consider an alternate specificity criterion: that of off-path 
preemption. In off-path preemption, an edge is inadmissible if any admissible prefix contains a 
preemptor. 

The terms on- and off -path preemption were popularized by Touretzky, et al. [41]. On-path 
preemption appeared first in Touretzky's work on inferential distance [39, 40]. Off-path preemp- 
tion is described in a credulous version by Sandewall [32], 13 in an ambiguity-blocking skeptical 
version by Horty, et al. [18], and in both ambiguity-blocking and ambiguity-propagating versions 
by Haugh [16]. 

Previous comparisons between on- and off-path preemption have resorted to arguments about 
the correct semantics of hierarchies with the topology of Tg. The difference is reflected in the 
hierarchy of figure 13 In Ts, the edge b • ->e preempts the inference a— >e — barring both a-b- d- e, 
and a- c-d-e. On-path preemption allows a-*e, since a • c - d - e (as well as a-/>e, since a-b- -ie). 
These arguments, based on the "intuitive" interpretation of Tg with various names assigned to its 
nodes, are nothing more than ad hoc attempts at proof-by-example. 

We have argued that our approach to inheritance makes more principled comparison possible. 
In particular, by isolating the preemption strategies from the underlying theory, we can compare 
these criteria directly. In this section, we present the same approaches to off-path preemption as 
we have described for on-path, above. At the end of this section, we show that the principles 
brought out by analyzing the two types of inheritance within our framework can be constructively 
compared, and give some opinions as to the relative merits of on- vs. off-path preemption. 



13 Sandewall's notion of extension differs significantly from ours: his extensions are actually expansions a la Touret- 
zky, and are limited to preferred expansions at that. 
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Figure 13: On- vs. off-path preemption. 

Path-Based Definition The off-path definition of admissibility is: 

An edge v ■ x is off-path admissible in T w.r.t. a if no truly unambiguous off-path admissible 
prefix a- s\ • • • s n - v, contains a preemptor of v • x (resp., v • -ix). 

The definition of preemptor remains the same. Because off-path preemption says that no 
(unambiguous) path through v to x may contain a preemptor of v • (->)x, this definition does not 
need to explicitly exclude redundant paths. 

We say that T off-path supports a— >« (resp., a-fix) if there is some sequence of off-path admis- 
sible edges a • S\ • • • s n ■ x (resp., a ■ s^ • ■ ■ s n • -<x) in T w.r.t. a. 

Model- Theoretic Semantics Here, we simply replace the definition of admissibility in the 
model-theoretic semantics of section 4.2 with that of the preceding paragraph. 

If X„ and Yj are two credulous extensions of an inheritance hierarchy T w.r.t. focus node a, 
then off-path specificity prefers X^ to Y^if there are some nodes v and x such that 

1. X£ and Y£ agree on all edges whose endpoints topologically precede a;, 

2. The edge v • (-i)x is off-path inadmissible in V w.r.t. a, and 

3. Y„ contains that inadmissible edge. 

4. X„ does not contain it. 

The model-theoretic semantics for credulous extensions remains as described in section 4.1. 
Minimal extensions under this ordering are the off-path preferred credulous extensions of T w.r.t. 
a, and their models are the off-path preferred models of T w.r.t. a: T off-path supports an inference 
iff that inference is entailed by some off-path model of T w.r.t. its focus node. By changing specificity 
criteria, we obtain different conclusion sets and correspondingly different preferences over credulous 
extensions. In general, it should be possible to obtain these results using a preemption strategy 
corresponding to any upwards theory of inheritance. 14 



"Because the definition of credulous extension is upwards, the approach presented here does not lend itself directly 
to the analysis of downwards inheritance theories. 
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Computing Specificity The algorithm for computing the specificity extension of a hierarchy 
w.r.t. a focus node can be adapted for off-path preemption: 

COMPUTE-OFF-PATH-SPECIFICITY-EXTENSION (I\ a) 

; fi£ will be the 
Let fi£ contain the a-reachable nodes of T, and no edges. ; off-path specificity extension 

; ofT w.r.t. a. 
For each node x in 0£,in topological order ; From a to ...: 

Add edges v ■ (->) x from T to fi£ ; Restore x-edges 

For each edge v ■ x (resp., v • -i x) in Q£, in reverse topological order ; Now weed out 

For each potentially preempting edge w • -> x (resp., w • x) in Q£ ; preempted x-edges: 
If w is positively but not negatively a-reachable in 0£ 
and Q£ contains a positive path from w to v ; ...then w preempts v • (->) x 

then remove the edge v • x (resp., v • -i x) from fi£ ; so remove it from fi£ 

Return 0% 

Like S„, fl£ contains only the (off-path) admissible edges of T w.r.t. a. Computing off-path 
support is reduced to verifying reachability in fl£. The complete procedure runs in polynomial 
time. 

Labeling Since ft^ ehminates the inadmissible edges of T w.r.t. a, we can use the labels of section 6 
to calculate contingent conclusions and ideally skeptical inheritance, in much the same way as we 
did for on-path preemption. It follows immediately from the properties of fi£ and theorem 5 that 

lx} a a is satisfiable iff F off-path supports a-*x and lxj a a is valid iff a—>x is an ideally skeptical 

conclusion of T using off-path preemption, (resp., §xj a a anda-^a:). 

On- or Off- Path? By defining off-path preemption in this framework, we can compare its under- 
lying assumptions to those of on-path preemption, presented above. By examining the differences 
in preference criteria, we see the principles behind these two types of reasoning: 

On-path preemption: an edge is inadmissible if every (non- redundant) admissible prefix 
contains a preemptor. 

Off-path preemption: an edge is inadmissible if any (unambiguous) admissible prefix 
contains a preemptor. 

That is, off-path preemption replaces the existential quantifier in the on-path definition of admis- 
sibility with a universal. 

Let t\, ...,t n be many types of is, each differing from the typical t in specific ways. For example, 
t might be birds, and the ti might be flightless birds, tiny birds, songbirds, etc.. Each of these 
categories inherits most of the default properties of birds, but overrides some particular default. 
Now, if some particular bird inherits from several of these ti, what are its expected properties? 

Off-path preemption says that a particular bird is atypical for a particular default if it is a 
member of any ti that overrides that default — e.g., doesn't fly if it's a penguin — even if it's a 
member of many other subclasses — songbirds or even tree-dwelling birds — that are normal for the 
default. In other words, off-path preemption overrides default behavior whenever possible. 

In contrast, on-path preemption remains agnostic about overriding defaults. If something is a 
member of an atypical subclass U, it certainly may be atypical for the corresponding property off: 
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penguins may not fly. However, if it is also a member of tj which does not override that default — a 
songbird or tree-dwelling penguin — then it may arguably possess default behavior — it may be a 
Hying penguin, after all. 

The reason for defining ti,...,t n as subtypes of t is generally to enforce certain distinctions 
between the i,s and typical ts: subclasses are not the same as their superclasses, or we wouldn't 
have defined the subclass in the first place. The argument in favor of off-path reasoning says that 
anything which is a t{ should probably be assumed to be at least as unusual as i;s. Off-path 
preemption's strategy is to assume maximal atypicality. In contrast, on-path preemption concedes 
that there are arguments both ways. One argument relies on the default behavior of subclasses, 
while the other depends on the explicit information about atypicality. On-path inheritance makes 
no distinction between these, while off-path inheritance favors the explicit overriding of defaults. 
If we are confident that our hierarchy is fully fleshed out and contains all relevant information, it 
may well be that off-path preemption provides a more appropriate description of our intuitions. 15 

9 Comparisons with other Inheritance Theories 

Previous attempts to compare existing inheritance theories have proceeded largely on the basis 
of analysis of specific results on particular examples. Because existing theories either translate 
inheritance hierarchies into distinct target logics, or bury the ambiguity-resolving strategies (such 
as preemption) in complex path-based or translation criteria, little if any principled analysis has 
been possible. Touretzky et al. [41] attempt to overcome this difficulty. They delimit a space of 
existing and potential inheritance theories, identifying several dimensions along which these theories 
vary. Nonetheless, this work still relies largely on examples rather than principles, and does not 
separate ambiguity-resolution from the space over which the ambiguities arise. 

A second attempt to unify and compare existing inheritance theories is due to Haugh [16]. 
Haugh translates inheritance theories into circumscriptive meta-theories. His theory is modular 
with respect to the preemption axioms used, and indeed he presents preemption axioms for theories 
of credulous inheritance, skeptical inheritance both as presented by Horty, et al. [18] and in a 
corresponding ambiguity-propagating form, and various types of off-path preemption. However, 
he does not distinguish a set of interpretations corresponding to these preemption axioms, making 
it difficult to identify the intuitive principles to which his various axioms correspond. Haugh's 
confounding of meta-strategies for addressing ambiguity — credulous versus skeptical reasoning — 
with particular ambiguity-resolving heuristics — on- versus off-path, etc. — is a further symptom of 
this failure to identify the underlying space over which ambiguity quantifies. 

The numerous preemption strategies in the literature result from differing interpretations of 
the notion of "subclass," or specificity. The underlying principle is that more specific information 
should override more general. But there is little agreement on a single definition of "more specific" 
at the level of the nodes and edges of an inheritance hierarchy. In the body of this paper, we 
present on-path preemption, which is conservative with respect to the acceptance of abnormality. 
In section 8, we present off-path preemption, which provides a more promiscuous approach to 
abnormality in inheritance. 

The different treatments of true ambiguity are reflected in the debate over skeptical inheri- 
tance. In section 7, we describe previous approaches to skeptical inheritance, and demonstrate the 
shortcomings of path-based skeptical approaches. 

15 An anecdotal aside: I was particularly surprised to reach this conclusion, myself. I'd been a long-standing 
opponent of off-path preemption, but when I'd gotten the principles worked out, I have to admit that I found myself 
convinced. I present this as anecdotal evidence that understanding the underlying principles really does help sort out 
the "right" intuitions — LAS 
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By making various choices on the skeptical/credulous spectrum, and in on- vs. off-path pre- 
emption, we can describe many of the existing theories of inheritance. For example, Sandewall's 
theory [32] is off-path and credulous; Horty, et a/.'s [18] is off-path and ambiguity-blocking. Touret- 
zky's original theory [39, 40] is a downwards version of the on-path creduous theory presented in 
sections 3-5. 

By describing other inheritance theories in the framework presented here, we obtain not merely 
soundness and completeness results, but a more profound understanding of the underlying princi- 
ples. This allows us to make comparisons based not on ad hoc examples, but on intuitions that 
underly them. 
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A Proofs of Theorems 

The proofs of inheritance theorems are given for the positive cases only (e.g., X£ |> a— >s); the 
proofs of the negative cases (e.g., X[ |> a-/>x) are similar. Many of these proofs are inductive. The 
following two definitions provide the basis for these inductive proofs. 

Definition: A node x £ Vr is a leaf of T if x has no children in F, i.e., Q>os r (y) = Qieg r (y) = 0. 



Definition: The depth of a node a; in a hierarchy T, 6(x,T), is denned recursively: 

1. If a; is a leaf of T, S(x, T) = 0. 

2. If a; is not a leaf of T, S(x,T) = I + max({6(w,T) | w € Q>os T (x) U Gieg r {x)}) 

A.l Credulous Extension Semantics 

Theorem 1 (Soundness and Completeness for Credulous Extensions) 

Let T be an inheritance hierarchy, with a,x £ Vr ■ Let X^ be a credulous extension of 

T w.r.t. a, and let X„ be the propositional theory corresponding to X„. The following 
are equivalent: 

1. X^\>a-+x (resp., a-/>x). 

2. x is positively a-reachable in X£ (resp., negatively a-reachable) . 

3. X^ h x (resp., ~x). 

4. X£ |= x (resp., ~x). 
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Proof: 

1 <£> 2: By definition, a hierarchy X£ |> a—>x iff x is positively a-reachable in X£ by an 

admissible path; but since a credulous extension is unambiguous, every path is 
admissible. 

2 <£> 3: =*•: Assume that a; is positively a-reachable in X„, i.e. (3 si • • • s n ) a ■ si • • • 

5 n • a; £ JE-jrr. Then 

■"■a 

a A (aDii) A /\ (S;DS;+i) A (j„Di) (1) 

l<i<n-l 

is a sub-theory of X„; since a theory validates any subtheory, X„ h (1) and its 
components. So X£ ho;X^ h 2 D Si, therefore X£ h Sj; similarly X£ h Si D S 2 , 
so X£ h S 2 ; e£c. So X£ h £. 
<=: Assume x is not positively a-reachable in X£, but X^ h x. Since X£ h J, 
X£ U {~a?} h .1. In particular, X£ U {~a:} H ~3; and by the deduction 
theorem, X„ h ~ x D ~ a. This is just a, D x Since X„ is a conjunction 
of clauses of the form S D (~)< (and the singleton aV ; X^ h a D a? means that 
either a = x or there is some conjunct 2 D Si in X^ such that X„ r Si D a:. 
By a similar argument, we can show that either Si = x or there is some S2 
such that Si D$ 2 is in X„ and X„ h S 2 D ~», etc., so that there must be 
a chain of conjuncts 2 D Si, Si D S 2 , ..., S n _i D S n , S„ D ~2 in X£. Since every 
conjunct of X£ corresponds to an edge of E^r , this implies a sequence of edges 
a • si • • • s n • a; — making a; a-reachable in X„; contradiction. 

3 <$■ 4: This follows from the soundness and completeness of propositional logic: a 

formula is derivable from a propositional theory iff every model of that theory 
entails that formula. 



A. 2 Soundness and Completeness 

The following lemma is used in the proof of several theorems, in this section and elsewhere. It says 
that any unambiguous a-connected subhierarchy of T can be extended to make it maximal — i.e., a 
credulous extension of V w.r.t. a. 



Lemma 2.1 (Extension Construction) 

Let r be an inheritance hierarchy, and let {v{ • x{\ be an unambiguous a-connected 
subhierarchy of T. Then there is an extension X„ of T w.r.t. a containing {v{ • (~i)xi} 
(i.e. {vi ■ (^)xi) 6 Exrj. 

Further, if{vi-(-*)xi} are all admissible in T w.r.t. a, then there is a preferred extension 
of T w.r.t. a containing {vi • a;,}. 

Proof: Construct X£ "= Extend({vi • ajj},r,a) as follows: 
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1. Let {vi -(-t)^} G E x r. 

2. For each node x, in topological order, add the edge v • (-i)a; G Ep to Exr if 

(a) t) is positively a- reachable in Extend({v{ • aij},r,a) (as constructed so far), 

(b) v ■ (->)a: is admissible in T w.r.t. a, and 

(c) adding v ■ (->)x won't make Extend({vi • a:;},r,a) (as constructed so far) am- 
biguous. 

By construction, X„ = Extend({v{ ■ (->)a:i},r,a) is a credulous extension of T w.r.t. 
a: it is unambiguous and a-connected, and any edge that could be added without 
contradicting one of these two properties has been. 

Further, if every edge in {v{ • (->)xi} is admissible in T w.r.t. a, we claim that X„ = 
Extend({vi • a:;},r,a) is a preferred credulous extension of T w.r.t. a. 

Let Y£ ^ X„ be a credulous extension of T w.r.t. a. Assume by way of contradiction 
that Y„ < X„. Then there are some nodes s,t G Vx r sucn that 

1. X£ and Y£ agree on all edges whose endpoints topologically precede t in any 

topological order, 

2. s • (->)t is inadmissible in T w.r.t. a, 

3. X^ |> a • si • • • s m • s • (-i)t, (m > 0), and 

4. Y£|£ a -*i •••*,».*•(-.)< 

If s • (-i)t is inadmissible in T w.r.t. a, then either 

1. s ■ (-i)t is in {vi • {-\)xi}. But then it must be admissible, since {vi • (— i)aji}- is 
admissible in T; or 

2. it was added during the construction. But then it is admissible in T w.r.t. a, by 
condition 2b. 

So X£ does not contain an inadmissible edge, and it is is therefore a preferred extension 
of T w.r.t. a. 



The following lemma says that every edge of a preferred credulous extension of T is admissible in 

r. 

Lemma 2.2 Let T be an inheritance hierarchy, with a £ Vr, and let X£ € 
Vref(T, a) be a preferred credulous extension ofT w.r.t. a. Then every edge v ■ (~<)x in 
X„ is admissible in T w.r.t. a. 

Proof: Assume that there is an edge in X^ that is inadmissible in T w.r.t. a. There must 
be some inadmissible edge, say v-x, for which every edge whose endpoints topologically 
precede x is admissible. Since v-x £ E-^r, there must be some path a-s 1 ---s n -v-x G ExGa 
(a credulous extension of T w.r.t. a is a-connected). Certainly, this path is not admissible 
in T w.r.t. a (else v • x would be admissible in T w.r.t. a); but by hypothesis, v • x is 
the only inadmissible edge in it (since all other edges topologically precede v • x). So 
a • si • • • s n • v is admissible in T w.r.t. a. Consider Y^ = Extend(X^\ x ,T,a), where X£| x 
is 

{b ■ (->)q | b • (-i)q G E x r and q topologically precedes x in T} 
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Certainly Y„ is a credulous extension of T w.r.t. a (by lemma 2.1, since X^| B is an 
unambiguous subhierarchy of T w.r.t. a). Further, Y^ ■< X£: 

1. X£ and Y„ agree on all edges whose endpoints topologically precede x, 

2. v ■ x is inadmissible in T w.r.t. a, 

3. X„ |> a • si ■ ■ ■ s n • v • x, and 

4. Y£ |£ a ■ S\ ■ ■ • s n • v • x. 

But this means that X„ g" Vref(T, a); contradiction! 



Theorem 2 (Soundness and Completeness) 

Let T be an inheritance hierarchy, with a,x G Vr, and let Tref(T,a)be the set of 
preferred extensions of T w.r.t. a. Then T \> a—>x iff there is some preferred extension 
X]j G Vref(T, a) such that X£ |= x (resp., a-/*x and ~x). 

Proof: 

=^: This follows directly from, lemma 2.1 and theorem 1, conditions 1 and 4: If T |> a-*x, 
then there is an admissible path a • si • • • s n • x in T. So — by lemma 2.1 — Extend({a • 
si,...,s n • x},T,a) is a preferred credulous extension of T w.r.t. a; call it X^. By 
theorem 1, whenever x is positively a-reachable in X£, then X£ |= x. 

<='. Assume that T \i> a-*x, i.e. that there is no admissible path from a to x in T. Then 
by lemma 2.2, any credulous extension containing such a path — and hence an 
inadmissible edge — cannot be a preferred credulous extension of T w.r.t. a. 



A. 3 Computing Inheritance 

Theorem 3 (Complexity of compute-specificity-extension) 
Constructing E^ is 0(n 5 ) 

Proof: 

We assume that an inheritance hierarchy T = (Vr,Er) is represented as: 

Vp is an array [integer] of nodes in topological order 
Er is represented by two arrays, 

Er + and Er - , both array [node xnode] of boolean 



COMPUTE-SPECIFICITY- EXTENSION (I\ a) 
R : array [node xnode] of boolean; 
E„, S* : graphs with structure equivalent to T 
unreachable : arrayfnode] of boolean 

Fort; .:= 1 to |V r | 
For x := 1 to |V r | 
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Esr + [v,x] := false 
E s r~[i>,a:] := false 
R[v, x] := false 
n := TOPSORT-REACHABLE-SUBSET (r,o,E^) 

For x := 1 to n do 

For v :— 1 to n do 
UE r + [V r [v],V r {x}] 

J5 S r + [V s rW, V B r[as]] := true 
liE r -[V r [v),V r [x}] 

JB s r-[V s rH,y E r[s]] := true 
For v := (x — 1) to a do 

IfEsr + tVsrM.Ysrfs]] 

For i := 1 ton 

unreachable [i] :— false 
S* := REMOVE-NEGATIVE-PREEMPTORS (Sj.v.as) 
If not (POSITIVELY-REACHABLE? (£*, o, v)) 

Evr + [Vvr[v],Vvr[x]} := false 
IfE s r-[V s rH> s r[x]J 
For i := 1 to n 

unreachable [i] := false 
S* := REMOVE-POSITIVE-PREEMPTORS (e£, «, *) 
If not (POSITIVELY-REACHABLE? (S*. a, »)) 

E s r-[V s rH,V s rH] := false 
For p := (x - 1) to a do 

IfEsr + tVsrbl.VsrM] 

If REDUNDANT? (S J, a, p, ») 
i2[p, a] := true 

E s r + [p, x] := false 
For p := 1 to n do 
For x := 1 to n do 

•Es£ + b.s] == E s r + [p,a;] or R\p,x] 

Return l£ 
Auxilliary code may be found in figure 14. 



The complexity of this algorithm is 0(t + n 3 + n 2 (p+ 6) + n 2 r), where n is the 
number of nodes in the hierarchy (|Vr|), t is the computational complexity of 
a call to TOPSORT-REACHABLE-SUBSET, p is the complexity of REMOVE-...- 
PREEMPTORS, b is the cost of POSITIVELY-REACHABLE?, and r represents the 
call to REDUNDANT?. 

Examination of the code in figure 14 yields a cost of 0(e) < 0(n 2 ) for TOPSORT 
(and hence for TOPSORT-REACHABLE-SUBSET), where e = |E r | < | V r | 2 = n 2 ; this 
is a simiple variant of depth-first search taken from Aho, Hopcroft, and Ullman [3]. 
POSITIVELY-REACHABLE is similar, using unreachable!] as mark[j and potentially 
terminating early (before the entire hierarchy has been searched) if the first if term 
returns true. Its complexity is also 0(e), since it too searches each edge at most once. 
POS-REACH-W/0-NEGS? follows POSITIVELY-REACHABLE; the test FOR n := 1 
to (x — 1) is performed at most once per node, the complexity of POS-REACH-W/0- 
NEGS? is 0(e + n 2 ) or simply 0{n 2 ). REDUNDANT? is therefore 0(n 3 ), calling POS- 
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TOPSORT-REACHABLE-SUBSET (r in , o, T^t) 
; Adapted from [3, p. 222]. 
For * := 1 to |Vr in | do 

mark[i] := false 
i := 

TOPSORT (o) 
For j := 1 to i do 

Vr.M :=TST[i + 1 - j] 
Return i 



TOPSORT (o) 
mark[a] := true 
For x := 1 to \Vr in \ do 
If mark [a;] = false then 

KE+JVtM V rin [x]] or E^JV^Ja], V Vin [x]} 
then TOPSORT (x) 
i := i + 1 
TST[z] := a 



POSITIVELY-REACHABLE? (E*,M) 
; assumes an external array unreachablefinteger] 
; of boolean, initialized to false 
If 6 = x 

Return true 
Else 
If unreachable [b] 

Return false 
Else 
If 6 > x 

unreachable [b] := true 

Return false 
Else 

reached := false 
For v := as to (b + 1) 

If not (reached) 

IfEs* + [Vs*[&],V H *H] 
reached := 

POSITIVELY-REACHABLE? (E*,w,a) 
unreachable [v] := not (reached) 
Return reached 



REDUNDANT? (E^fc, x ) 
For i := 1 to n 

unreachable [i] := false 
For v :- (b + 1) to (as - 1) 

If POS-REACH-W/O-NEGS? (s£, b,v) 
and POS-REACH-W/O-NEGS? (E£,t>,») 
Return true 
Return false 



REMOVE-NEGATIVE- 
PREEMPTORS (E£,r,a>) 

E* := (Vj;r,Ej;r) 

For « := 1 ton 

IfE s r-[V s rW,V s rW] (***) 

and not E s r + [V S r[s], V s r[a:]] 
For t := 1 ton 

If£ E r + [y s r[ S ],y s r[/]] 

Es* + [V s *[s],V s *[*]] -false 

IfE s r-[V s rW,V s rW] 

Bb*"[Vs*W,Vd*[*]] := false 

IfE s r + [V s rM,V s r[ S ]] 

3s* + [V s *M,V s *[«]] := false 

IfE s r-[V s rM,V s rW] 

J5 S * " [ V s . [<], V s * [«]] := false 
Return E* 



REMOVE-POSITIVE-PREEMPTORS is identi- 
cal save that line (***) reads 



UE^[V^[s],V^[x}} 

and not E s r [ V s r[«], V s r[aj]] 



POS-REACH-W/O-NEGS? (e£, b, v) 
; Like POSITIVELY-REACHABLE, backwards, 
; but with the extra constraint that none of the 
; intermediate nodes can be negatively a-reachable 

lib = x 

Return true 
Else 
If unreachable [as] 

Return false 
Else 
lib > x 

unreachable [as] := true 

Return false 
Else 
For n := 1 to (as - 1) 

IfE E r-[V s r[n],V s r[as]] 
unreachable [as] := true 
Return false 
reached := false 
For v := (x — 1) to b 

If not (reached) 

IfE s r + [V E rH,V s r[as]] 

reached := 

POS-REACH-W/O-NEGS? (E£,&, v) 
unreachable |/y] := not (reached) 
Return reached 



Figure 14: Auxiliary code for COMPUTE-SPECIFICITY-EXTENSION 
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REACH- W/O-NEGS? twice (0(2n 2 ) = 0(n 2 )) for each node between b and x. Finally, 
REMOVE- ...-PREEMPTORS is simply 0{n 2 ). 

The total complexity of COMPUTE-SPECIFICITY-EXTENSION is therefore 
0(n 2 + n 3 + n 2 (n 2 + n 2 ) + n 2 n 3 ) or 0(n 5 ). 



Theorem 4 (Correctness of compute-specificity-extension) 
Let T be an inheritance hierarchy, with a£ Vr, and let S„ be the specificity extension 
of T w.r.t. a. Then 

E s r = {v • (~i)x\v • {->)x admissible in Tw.r.t. a} 

Proof: The proof proceeds by induction on the length of the longest path from o to v 
in T. 

Base Case: Consider the case in which the edge a • x £ Er is the longest path from a to 
x in T. In this case, T \> a-^x — because a ■ x is not redundant (else there would be 
a longer path from a to x in P) and contains no preempting intermediary — and x 
is positively a-reachable in S^ — again, x has no a-reachable negative preemptors 
inT. 

Induction Hypothesis: Assume that for every node x € Vr with the longest path from 
a to x in T of length < k, v ■ (-i)a; is admissible in T w.r.t. a iff v • (->)x £ ££. 

Induction Step: Consider a node x with the longest path from a to x, a • Si • • • s n • x, 
n= k. Claim: an edge v ■ x is in E£ iff it is admissible in T w.r.t. a. 

=>% Let v • x be admissible in V w.r.t. a. Then there is some non-redundant sequence 
of admissible edges a • 1 1 • • • t m • v ■ x G £r containing no preemptors of s n • y. 
Further, m < k (since the length of the longest path from a to x is k + 1, and the 
length of this path is m + 2). So a • t\ • • • t m • v has length at most k, and by the 
induction hypothesis, since it is composed of edges admissible in T, it is entirely 
contained in S„. Is v • x in E^? Assume not. Then it must be the case that if we 
REMOVE-NEGATIVE-PREEMPTORS from E£, x is no longer POSITIVELY- 
REACHABLE?. But none of a, ti, ...£„, v is a negative preemptor of a;, so the path 
a-ti • • -t m • v -x remains in S* and so in E£. Contradiction. 

<*=: Let v • x be in E£. Then by the induction hypothesis, every positive path from 
a to v in E^ is admissible in T w.r.t. a (since the length of the longest path 
to v is at most k). Certainly, there must be such a path, or v would not be 
POSTIVELY-REACHABLE? and vx would not be added to E s r. Further, there 
is such a path with no redundant edges and no preemptor of a;, since any edge that 
is REDUNDANT? is temporarily removed from E^ and we further REMOVE- 
NEGATIVE-PREEMPTORS before determining that v remains POSITIVELY- 
REACHABLE? (else v • x would not be in E„). So there is an admissible positive 
path from a through v to x; and v • x is admissible in T w.r.t. a. 
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Corollary 4.1 Let T be an inheritance hierarchy, with o € Vr- Let Vref(T,a) 
be the set of preferred credulous extensions of T w.r.t. a and let E^ be the specificity 
extension of T w.r.t. a. Then X£ £ Vref(T, a) iff X£ is a credulous extension of E£ 
w.r.t. a. 

Proof: 

=>i Consider X£ € Vref(T, a), a preferred credulous extension of T w.r.t. a. Claim: X£ 
is a credulous extension of £„. 

X£ is a subhierarchy of E£: By lemma 2.2, every edge of X£ is admissible in T 
w.r.t. a. By theorem 4.2, every admissible edge of T w.r.t. a is in E s r; so 

X£ is unambiguous: This follows directly from the fact that X„ is a credulous 
extension of T w.r.t. a 

X£ is maximal: Imagine that there is an edge v ■ x in E£ that is not in X„. 
Certainly, this edge is in T; but X^ is maximal w.r.t. T and a. So adding 
v • x would make X„ not a-connected (and hence an extension of neither T nor 
S£) or ambiguous w.r.t. a (with similar result for E£) or not preferred. By 
theorem 4.2, since this edge is in ££, it is admissible in T w.r.t. a. So adding 
it to X;, would not prevent X„ from being a preferred credulous extension of 
T w.r.t. a. Therefore, no such edge exists. 

•4=: Let X a ° be a credulous extension of E„ w.r.t. a. Claim: X„ € Vref(T, a). 

Certainly, every edge of X a a is in ££, so by theorem 4.2, every edge of Xa a is 
admissible in T w.r.t. a. By lemma 2.1, X a ° must therefore be contained in a 

preferred credulous extension of T w.r.t. a; call it X£. Let v ■ x be an edge of X„ 

s r 
that is not an edge of X a a , i.e., v ■ x 6 Exr - E s r . By lemma 2.2, v ■ x is admissible 

x a ° 

in T w.r.t. a; by theorem 4.2, this means that it is in S£. Since it is not in Xo a , 
adding it to X a ° would make X a ° ambiguous — but then X^ must be ambiguous — 
or not a-connected — but then X£ must not be a-connected. So no such edge can 
exist, and E x r - E s r = 0, i.e. X r a = X? a ; and X? = X r a G Vref(T, a). 



Corollary 4.2 Let T be an inheritance hierarchy, with a£ Vp. Let £^ be the 
specificity extension of T w.r.t. a. Then r|>a-»a: iff x is positively a-reachable in 
Yr a (resp., a-/*x and negatively a-reachable) . 

Proof: 

=>: If r|>a— *x, then there is some (non- redundant) sequence of admissible positive 
edges a • s\ • • ■ s n • x in T (containing no preempting intermediary). Since each of 
these edges is admissible in T, by theorem 4, each of these edges is in E£; so x is 
positively a-reachable in E^. 

<^: If S a does not contain a positive path from a to a;, then (by theorem 4) there is no 
sequence of admissible edges from a to x in T, so T [£ a-*x. 
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Corollary 4.3 (Complexity of Credulous Inheritance) 

Deciding whether T |> a^x is 0(n s ) (resp., a-/*x). 

Proof: By corollary 4.2, T |> a-*x iff x is positively a-reachable in E^. By theorem 3, 
finding S„ is 0(n 5 ). Determining reachability can be accomplished by depth-first or 
breadth-first search, either of which is 0(e) < 0(n 2 ) < 0(n 5 ); since the two passes are 
independent and sequential, the total complexity is 0(n 5 ). 



A. 4 Labels 

The next lemma says that if a; is (positively or negatively) a-reachable, then [*]a=(~[*lo)- 

Lemma 5.1 Let T be an inheritance hierarchy, with a,x E Vr- Let £(T,a) be the 
ATMS labeling of T w.r.t. a, with [a:]£,p5|£ G C(T,a). Then 

1. [«K = (~|[3BK) A mos T {x)f a V Kheg T {x)t a ) 

2. Ml = (~MD A (lQ>os T (x)f a V l(he 9T (x)f a ). 

Proof: 



lQ>osAx)f a 


l(heg r (x)f a 


X 


i*t: 


(~K) A (lQ>os r (x)Y a V l(he 9r (x)f a ) 
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± 
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± 


± 
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JL 


jl 
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Similarly, 



lQ>os r (x)f a 
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Theorem 5 (Correspondence Theorem) 

Let r be an inheritance hierarchy, with a,x G Vr- Then there is a correspondence 
between the set of credulous extensions of T w.r.t. a, and the truth-assignments to 
the free variables in the labels of V w.r.t. a, such that the truth- assignment assigns 
Mo = IT] iff ^e corresponding extension supports a—>x (resp., fscj^ and a-/*x). 

Proof: 

Let T be the set of all possible truth-assignments to the variable corresponding to the 
nodes of Vr- If T € T is a truth-assignment to the variables corresponding to Vr, 
and [«]£ is a propositional formula over these variables, then T(|a:]£) is the truth-value 
assigned to the formula [#]£ under T in the traditional sense. 

Let {X„} be the set of credulous extensions of T w.r.t. a. 



Truth Assignments to Credulous Extensions: 

Define <p : T -> {X^} as 

Vr) = {t\s-h)t£E T cTt-(-,)v£E T } 
E v{T) = {s-teE r \T(lsf a ) = T(ltf a ) = [T]} 

U{s • -,* G Br I T(WD = [T] and T(ftfa) = [T]} 
We claim that <p(T) is a credulous extension of T w.r.t. a. 

1. Certainly, f(T) is a subhierarchy of V. 

2. <p{T) is unambiguous: By lemma 5.1, the formula |i]]£ A p~]]£ is unsatisfiable: 



I*Ea[fE = I*EA(HtE)A([q»^.(*)Kvlfli^r(<)K)) 

= (I*E A (~M)) A ([Oh»t(*)E v lft«»r(t)E) 
= 1 A (lQ>os T (t)f a v [ft« r (*)E) 

= 1 

So it cannot be the case, for any Si,S2,t, that both 5j • t and S2 • ->t are in E^q-y 

<p(T) is maximal: Assume by way of contradiction that there is some edge s-(-i)t G 
Br - B v (t-), and { V^j-y E v ^ U {s • ( ->)t}) is unambiguous and a-connected. Then 
either T([*E) ^ [T], or T(M) («*., r([*E)# [T]. 

T(IsE) 7^ T: Then s is not positively a-reachable in f(T), and adding 5 • (-i)t 
would not preserve a-connectedness. 

T{ltf a ) (resp., T($Tf a ))^ T: But r(I*E) is either f T ] <* W—T assigns a 
boolean truth-value to every variable corresponding to a node in Vr, and 
[i]„ is a propositional formula over these variables. So T{\t J^) = [±]. But 

T{Wa) = (niQ>OS r (t)fa) A (-Tdft^rWE))) 

v(T([a». r (t)E) a rciift^rWE) a r(f)) 

= T(lQ,os r (t)f a ) A ((-rdtft^WE)) V T(t)) 

= W 
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In particular, 

niQ>os r (tW) = [j.] 

This means that Vp G Q>os T (t), T(|p]^) = [±]. In particular, T([jsJ£) = [JL] ^ 
[T], and s is not positively a-reachable in <p(T), so adding s ■ t would not 
preserve a- connectedness. By a similar argument, T( [[?]]„) ^ [T] means that 
T{¥neg T {t)f a ) = [±]; T(fsf a ) = [JL] ^ [T]; s is not positively a-reachable in 
<p(T); and adding s • -it would not preserve a-connectedness. 

Then T([a;]^) = [T] iff a; is positively a-reachable in <p(T), so by theorem 1, T(|a;]^) = 
[T] iff <p(T) |> a-*x. 

Credulous Extensions to Truth Assignments: 
Define V : {X r a } -+ T as 



f T, ifX T a \>a- 
\±, ifX r a $>a- 






Then (^fr(X^))(|[aj]J) = [T] iff X^ |>a^a:. The proof proceeds by induction on *(as,r): 

Base Cases: If a; is a leaf of T, then either 

l.x = a. Then X r a \ >a ^a. Also, [aft = [T], so (V(XD)(WD = (^(Xj))([T]) = 

[T], or 
2. x ? a. Then Tftx-+a, and [aft = [±], so (V(XO)(WD = (V>(XD)(W) = 

Induction Hypothesis: Assume that, for all nodes x G Vp with £(ai,r) < n, 
WXD)(WD = [T]ifFXr|>a^. 

Induction Step: Let y G V x r, £(t/,X£) = n. Then 

(^(xD)(l!/E) = (WxDxigmtME) a (~Mxr))(|[&«Mv)E))) 

V((^(xr))([0»^(y)E) A (V(xr))(I^ r (y)E) a (</«))(£)) 



Since Vw G <3>os r (a;) U (3ie0r(:c), ^(w?r) < n, the induction hypothesis applies and 
W(X T a ))(lwf a ) = [T] iff X T a |> o-w. Now, either 

1. X£|>a— >y. Then y is positively a-reachable in X„, but not negatively a- 
reachable: 3p G Q>os T (y), X£ |> a— >p, but Vn G Gieg T (y), X^ |£ a— m. Then 
3 P G 0>os r (2/), (^(XD)(bK) = [T], but Vn G (heg r (y), (4>(X T a ))(ln] T a ) = W; 
and WXj))(bfK) = [T] 

2. X^ |£ a-*y. Then y is not positively a-reachable in X„: either y is negatively 
a-reachable, or y is not a-reachable at all. In either case, Vp G Q>os r (y), 
X>a->p, and so (V(XD)(bE) = W- But then (i>(X r a ))(iyf tt ) = [±] as 
well. 
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Corollary 5.1 Let T be an inheritance hierarchy, with a,x £ Vr- Then [x]^ is 

satisfiable iff x is positively a-reachable in T. (resp., \xY a and negatively a-reachable) . 

Proof: If [a;]g is satisfiable, then there is a truth-assignment T to the variables cor- 
responding to the nodes of T such that T(|a;]^) = [T]. <p(T) is a credulous extension 
of T w.r.t. a such that T(|[yfl[) = [T] iff <p(T) |> a->y; so <p(T) |> a^x. By theorem 1, 
this means that x is positively a-reachable in f(T), and since <p(T) is a subhierarchy 
of T, x is positively a-reachable in T as well. Conversely, if x is positively a-reachable 
in T, then by lemma 2.1, there is an extension X£ of T w.r.t. a containing a positive 
path from a to x; by theorem 1, X£ |> a->x; and tf>(X^) is a valuation of the variables 
corresponding to the nodes of T that assigns [[a:]£ = [T]. 



Corollary 5.2 Let T be an inheritance hierarchy, with a,x £ Vr, and let E£ be the 

specificity e 
and a-/*x). 



specificity extension of T w.r.t. a. Then Jcc] a a is satisfiable iffT\>a^x (resp., prj a a 



Proof: By corollary 5.1, [icja is satisfiable iff a; is positively a-reachable in E„. By 
corollary 4.2, x is positively a-reachable in E^ iff T \>a— *x. 



A. 5 Skeptical Inheritance 

Corollary 5.3 Let T be an inheritance hierarchy, with a,x € Vr, and let ££ be 
the specificity extension of T w.r.t. a. Then [a:]£ is valid (tautological) iff a-*x holds 

in every credulous extension of T w.r.t. a, and lx} a a is valid iff a-*x holds in every 
preferred credulous extension of T w.r.t. a (resp., pr]£ and negatively a-reachable). 



Proof: If [[«]„ is valid, then every truth- assignment to the variables corresponding to 
the nodes of T satisfies [»]„. In particular, if X^ is a credulous extension of T w.r.t. 
a, then i/>(X T a ) satisfies [asfe— ^(X T a )({xf a ) = [T]. But by theorem 5, i>(X T a ) assigns 
^(X^da;]^) = [T] iff X£ |> a->ai. Since the choice of X„ was arbitrary, this holds for 
every credulous extension of T w.r.t. a, and every credulous extension of T w.r.t. a 
supports a— »«. 

Conversely, assume that {xj^ is not valid. Then there is some truth-assignment T that 
falsifies |a:]£: T(|a;]^) = [_|_]. Consider the credulous extension f{T)\ by theorem 5, 
<p(T) \t> a-^x. So there is some credulous extension of T w.r.t. a that does not support 
a— >ai. 

s r 

It follows that [x] a ° is valid iff a— >x holds in every credulous extension of S^ w.r.t. a; 

but by corollary 4.1, the credulous extensions of E£ w.r.t. a are precisely the preferred 

credulous extensions of T w.r.t. a. 
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Theorem 6 Any path-based inheritance theory will be either unsound or incomplete 
for ideally skeptical inheritance; the intersection of credulous extensions is not a path- 
based notion. 

Proof in text 



Corollary 6.1 (Complexity of Skeptical Inheritance) 

Ideally skeptical inheritance— computing the intersection of preferred credulous 
extensions — is 0(n 5 ). 

Proof in text 
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